diff --git a/index.html b/index.html
index 5189933..9e32cef 100644
--- a/index.html
+++ b/index.html
@@ -4871,7 +4871,9 @@
                             stack.amtauth.uuidStr = guidToStr(stack.amtauth.UUID).toLowerCase();
 
                             var trustedCsmeRoots = [
-                                '3BA13766B1889DCB1E2D55BACCC9EC087452F78783E2EBAFD918FF4ED6ACC840' // www.intel.com / OnDie CA DEBUG Root Cert Signing CA
+                                '3BA13766B1889DCB1E2D55BACCC9EC087452F78783E2EBAFD918FF4ED6ACC840', // www.intel.com / OnDie CA DEBUG Root Cert Signing CA
+                                'C001DF02B31A60A2B37130365956400A2AFCFD147E8552FD7EA3F17F2AB0D457', // www.intel.com / ODCA CA2 CSME Intermediate CA
+                                '5E3EEE5748AC13E0B3D1227FCDC4751AA1402DDE8031D21F63CB4ECF43F02440'  // www.intel.com / OnDie CA CSME Intermediate CA
                             ];
 
                             // Load the entire certificate chain and CRL's
@@ -10641,7 +10643,7 @@
                 if (idx_d24ForceBootDevice.value > 0) { bootSource = ['Force CD/DVD Boot', 'Force PXE Boot', 'Force Hard-drive Boot', 'Force Diagnostic Boot'][idx_d24ForceBootDevice.value - 1]; }
                 // ###END###{!PowerControl-OneClick}
                 // ###BEGIN###{PowerControl-OneClick}
-                if (idx_d24ForceBootDevice.value > 0) { bootSource = ['Force CD/DVD Boot', 'Force PXE Boot', 'Force Hard-drive Boot', 'Force Diagnostic Boot', 'Force OCR UEFI Boot Option ' + Q('idx_d24customBootMediaIndex').value, 'Force OCR UEFI HTTPS Boot'][idx_d24ForceBootDevice.value - 1]; }
+                if (idx_d24ForceBootDevice.value > 0) { bootSource = ['Force CD/DVD Boot', 'Force PXE Boot', 'Force Hard-drive Boot', 'Force Diagnostic Boot', 'Force OCR UEFI Boot Option ' + Q('idx_d24customBootMediaIndex').value, 'Force OCR UEFI HTTPS Boot', 'Force OCR UEFI HTTPS Boot'][idx_d24ForceBootDevice.value - 1]; }
                 // ###END###{PowerControl-OneClick}
             } else {
             // ###END###{PowerControl-Advanced}
diff --git a/trustedCA/ODCA_CA2_CSME_Intermediate.cer b/trustedCA/ODCA_CA2_CSME_Intermediate.cer
new file mode 100644
index 0000000..7a59f1f
Binary files /dev/null and b/trustedCA/ODCA_CA2_CSME_Intermediate.cer differ
diff --git a/trustedCA/OnDie_CA_CSME_Intermediate.cer b/trustedCA/OnDie_CA_CSME_Intermediate.cer
new file mode 100644
index 0000000..f1e1bfc
Binary files /dev/null and b/trustedCA/OnDie_CA_CSME_Intermediate.cer differ
diff --git a/trustedCA/hashes.txt b/trustedCA/hashes.txt
new file mode 100644
index 0000000..cbef085
--- /dev/null
+++ b/trustedCA/hashes.txt
@@ -0,0 +1,5 @@
+var trustedCsmeRoots = [
+    '3BA13766B1889DCB1E2D55BACCC9EC087452F78783E2EBAFD918FF4ED6ACC840', // www.intel.com / OnDie CA DEBUG Root Cert Signing CA
+    'C001DF02B31A60A2B37130365956400A2AFCFD147E8552FD7EA3F17F2AB0D457', // www.intel.com / ODCA CA2 CSME Intermediate CA
+    '5E3EEE5748AC13E0B3D1227FCDC4751AA1402DDE8031D21F63CB4ECF43F02440'  // www.intel.com / OnDie CA CSME Intermediate CA
+];
\ No newline at end of file